This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json) Hash identifier: SVXgyzUAi+YMfh+lMPRp+NSlQMNaZYRakPBEAMqKaUg= Subject key identifier: EE:50:45:40:CC:94:3F:B6:C0:B7:9E:2E:26:77:F6:3D:BC:5B:F6:A5 Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c Certificate serial: 019B446E2E9A0D9777F36016EFBA33C1756B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 05:00:30 +0000 Manifest this update: Mon 22 Dec 2025 05:00:30 +0000 Manifest next update: Tue 23 Dec 2025 05:00:30 +0000 Files and hashes: 1: 1-FD6F4qn_9bSIPxqte-wc4QpAnY.roa (hash: R4A5i2N8JYKg21Uc7Bt5Hjz+LtBEOYUw0Vl9yYmvj1U=) 2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=) 3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: zQFxhxRkJuHgTdnb2arqEebdDcCIWdqtNAEbeOH1xMk=) 4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=) 5: escRk3d2NjI3vOhsunfMskewVFU.roa (hash: zPSViHW+zBVRTJi3BUxGbJ65sQUAitf2bEnfu5wf6oI=) 6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=) 7: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:2e:9a:0d:97:77:f3:60:16:ef:ba:33:c1:75:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c Validity Not Before: Dec 22 05:00:30 2025 GMT Not After : Dec 23 05:00:30 2025 GMT Subject: CN=ee504540cc943fb6c0b79e2e2677f63dbc5bf6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:c8:a4:79:22:ff:b7:fb:15:9d:dd:0b:37: cf:26:ef:42:ae:0f:01:d6:b0:1f:9e:42:00:70:36: e1:4b:a6:21:9e:11:9d:65:10:9b:0b:72:1c:cb:d7: f3:65:a6:a6:f2:26:05:ef:80:f3:a4:f0:91:88:59: 15:77:c9:8b:1f:39:07:d0:54:2f:79:68:c5:ad:53: 14:50:8d:d8:fe:23:c6:95:6d:d1:c3:39:c6:de:cc: e7:73:41:a8:c4:8e:15:9a:8d:c0:02:99:ed:a7:4e: 71:40:e7:64:dd:d7:20:ee:f2:9a:d8:a8:75:b1:4b: db:f9:cf:aa:de:cb:e0:aa:11:aa:2c:58:22:f8:74: cc:90:f5:57:a7:63:4e:61:a9:12:2d:7c:16:91:56: 74:4c:91:25:c0:47:f1:3d:b6:6a:9b:39:78:a5:23: d2:5c:97:b4:11:c4:61:e0:d8:3e:ec:6b:71:eb:22: 68:cc:e0:5b:8a:6c:f6:59:5f:b5:e8:a5:2f:ae:8f: e6:b2:49:ee:a7:a8:db:01:b1:1f:f5:18:1c:96:e6: 4e:ee:34:ef:ed:99:9c:8f:29:6c:57:19:d5:6c:ce: bc:cc:71:b9:df:a9:b2:00:91:c1:6b:be:76:a1:9d: ff:2f:6c:57:67:8e:6c:f5:19:6f:b6:df:59:4a:ea: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:50:45:40:CC:94:3F:B6:C0:B7:9E:2E:26:77:F6:3D:BC:5B:F6:A5 X509v3 Authority Key Identifier: keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b3:fe:ff:8d:f8:35:f2:48:51:08:8e:f3:4c:db:f8:e9:be: f0:52:37:ff:62:ae:3c:d9:23:52:45:9f:71:97:46:e3:b8:5c: 48:b9:f8:87:51:06:45:3f:64:2a:e7:90:b3:e5:8b:c9:66:21: 00:a2:70:6c:df:dc:91:a7:15:af:01:e3:37:29:36:59:f8:22: 3c:22:a2:d8:d9:ee:17:20:2b:e2:46:8b:04:20:98:78:40:58: 33:6d:7c:ed:22:04:30:25:9c:e5:04:b0:92:67:f8:b6:bd:06: 95:d8:eb:a8:95:36:0f:13:79:95:dd:d4:c9:7d:8a:ab:83:51: 29:d2:ed:31:86:8a:a9:01:ad:45:65:82:fb:bb:99:df:21:b7: 8d:0c:76:a2:9f:7a:e9:db:f2:22:91:e9:54:fc:0f:1e:c7:aa: d3:d1:41:b2:68:11:ef:e5:72:2f:4f:d7:7a:e7:eb:0e:ac:3b: ab:3d:29:d6:54:af:eb:2a:d5:93:b8:b9:d9:66:6d:b3:f0:16: 56:57:d0:23:51:8a:19:fb:f9:1c:6b:7b:0a:a4:82:15:ae:31: 5c:fa:52:53:68:4e:1a:d3:06:af:90:2e:12:a9:06:fb:91:60: 40:5b:bb:74:a2:16:08:79:dc:8e:60:80:5d:26:38:05:59:a7: 18:73:0c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbi6aDZd382AW77ozwXVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy ZDE2MGMwHhcNMjUxMjIyMDUwMDMwWhcNMjUxMjIzMDUwMDMwWjAzMTEwLwYDVQQD EyhlZTUwNDU0MGNjOTQzZmI2YzBiNzllMmUyNjc3ZjYzZGJjNWJmNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8zIpHki/7f7FZ3dCzfPJu9Crg8B 1rAfnkIAcDbhS6YhnhGdZRCbC3Icy9fzZaam8iYF74DzpPCRiFkVd8mLHzkH0FQv eWjFrVMUUI3Y/iPGlW3RwznG3sznc0GoxI4Vmo3AApntp05xQOdk3dcg7vKa2Kh1 sUvb+c+q3svgqhGqLFgi+HTMkPVXp2NOYakSLXwWkVZ0TJElwEfxPbZqmzl4pSPS XJe0EcRh4Ng+7Gtx6yJozOBbimz2WV+16KUvro/msknup6jbAbEf9RgcluZO7jTv 7ZmcjylsVxnVbM68zHG536myAJHBa752oZ3/L2xXZ45s9Rlvtt9ZSuoKAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5QRUDMlD+2wLeeLiZ39j28W/alMB8GA1UdIwQY MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLP+/434 NfJIUQiO80zb+Om+8FI3/2KuPNkjUkWfcZdG47hcSLn4h1EGRT9kKueQs+WLyWYh AKJwbN/ckacVrwHjNyk2WfgiPCKi2NnuFyAr4kaLBCCYeEBYM2187SIEMCWc5QSw kmf4tr0GldjrqJU2DxN5ld3UyX2Kq4NRKdLtMYaKqQGtRWWC+7uZ3yG3jQx2op96 6dvyIpHpVPwPHseq09FBsmgR7+VyL0/XeufrDqw7qz0p1lSv6yrVk7i52WZts/AW VlfQI1GKGfv5HGt7CqSCFa4xXPpSU2hOGtMGr5AuEqkG+5FgQFu7dKIWCHncjmCA XSY4BVmnGHMMDQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:16:10 2025 by rpki-client